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v-tK&WttttM^ttfexh^x, mu*v 
i/zL—;v<Ds<7*—? z^fiWify&AsX^^tc ^vy A 

/:=iy7^^l/— >3^77>f $ titc fig £S 

U ttEx-*JfclMfla»fc<0'^5' bSrHtJES-KJIfl:* 
y h!7-^^jE«Blf3S«. 

S ttfcf*- * *S<0¥#fc:S«*-r * i K «t 9 x 

fc3y7^u-^3y77^ ^tJBS $ ftfc f*)^ SrS 
letter- #ff«#)«d»b©«W^-^l^jEd^SlflfeU 

[000 1 ] 

[»w©jri- *38«tt*y m7-**je» 



E*K#K:N1-&. SbfciBM-Si:, *»H«t, flW 

[0 0 0 2] *WJMF4»-0ttU *y M7-*fc*5it* 
[0 0 0 3] 

[«£&<£&«] ^^i/a^H-Cf-^O 
[0 0 0 4] *-f , ±E««f*ffiO» 1 <DVt&&mt L 

^ UX th 6fr"*T * ft* 38fff tc^ ^ 5 *r-T 

siSicLfcjiBff^rAaJasgsttrv^a (tcp 

WRAPPER ;Marl9 1996 ) 0 
[0005]**:, ±E#*r#«fc<0# 2 <BfiaKft*& L 

(The Design and Implementation of Tripwire 
; Feb 23 1995 ) . 

[0 0 0 6] £b\^ ±EilWfSr»©»3«)«S5ttflffc- 
UXtt, ASW^^FiE (^7 7*^ (Cracking) ) ^ 

y <t ^ L-fcti^^fc'S (Satan-network securi 

ty scanner) 0 
[ 0 0 0 7 ] * fc, lMM^m<Dm 4 fc L 

if JCioT^ 5 y^y^^tLT L* 5SSlC*oTV>* 

3&Sfe5 (C0PS;Nov 171991) 0 
[0 0 0 8] l&mtix-ftfea)® 5 <©^*iK«i: LTIi, 

un i xxm^bi\x^t>=i-—f<Ds<*y- vt^^ti 
b<oxhz>frZofr%^**/?irz>t><oxh<>x > s<x 
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-Kolj|*Sr*5r4 5 <£ ptCLfcV^'TAj&SfeS (Crac 
k Version 4. 1 ; Mar 3 1992 ) 0 

[0 0 0 9] ±E#ffi#ifc<D«6©«*ftfiJ4: LTtt. 
mW&**vYW5L<»mi*ftb (Sniffer 

) o 

[00 10] ±E«W*jfe<Df5 7 0a*a«^ 

(»§B¥4-3 1 5 3 4 3*&«) . 
[0011] 

[0 0 12] ±E*2 0«*S*fcJ:;h,tf* 

[0 0 13] £e>tc. rttbJBi, 2©flEMt»lcJ:*t 
(CAT, ¥1- r**H »^SWWfi!/ife*r* 

[0 0 14] -t LT, ±IE*3-5©tt3fcfitflHcJ:*L 

v^fc*. ;/n h=/HR©**K:S#lt:-Ctftv\ 
[0 0 15] *fc, ±BJB6©«*a«tiJ:ftri, 

[0 0 16] ±IB*7<0«3fett«*Cj:iltf. :/n 

(Df-fi<D7 4/l>* y SNfc^ft 5 i 3 Rift 

[0017] *38WofBioiWtt, r^y^ 



[0018] *^^^2(D@wri, *y hy- 

*Parc#*<a»«&a5 title* ^n^;l4oi* 

ft 9 pT«4IBftjKff SrSttr -5 r i l£&6o 
[0 0 19] 3<Z)@^1 ttt<Dy 

n hra/uSr&DftSeitf-Cf h!7— *3REAWr 

m*lc*y h7-**lEM1ft7x*yyJ*&&mL1t=*> 

So 

[0 0 2 0] 

eassnrv^/^y h£ft$j*tfx-*iK*xgi, 

rite* t) Sffr-^ $rMt^)T-^M 

flrx-* ic^jE^si^ lt v ^ t*f\feir z * *wx 
Si£<i;i-5J:5KLT^5 0 
[0 0 2 1 ] Uc^ot, x-*ffrifclSk:*5V*"t\ 

&mzimmtz^t\z±y)fm?-f*YEi8.Lx^z> 

[0 0 2 2] «Flc*y Yy-i?\Z.&VttlEttrr-9n 
[0 0 2 3] ^fc, »#JS2Ett<0*WHU ISftiift^ 
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[0 0 2 4] Lfca>oT, 7*-?ftf$,mc#^X, 

^»*ff^-^* s »«f>y*t4So z<Dtz.%>, y-*nft 

[0 0 2 5] £<b^> M«93C«a>sn». 19«a« 

try v tomtit z ntcT- 9 ^^(Dim^nmmi' % - 

$ ttfc ft S £ S I- r - $ ffr&^NI ^ <omVrr- * ic^F 
jE#$S£ l r v > 5 d^J^i" sf-^ aw^ff t & 3 v tr 

[0 0 2 6] U^oT, aytTa— ^"CEIWIEfrlCtt 
[0 0 2 7] 

[0 0 2 8] r<£>[g]2{;::fc^T, ??*lf4«rt*y h 17 

— * («T. TLANJ iV*5) "Cfe9, r^LANl 

[0 0 2 9] **lll»tt-eH:LANlW:, St^r- 



M7-* (H^^ri*) <i:> rt«fc^1-6rt«SMI5UI 
1 1 fc*&*6. ^^»»«[i]j»l lttA— *2K& 
JttSttTV^o fiU LANl £ LT«±igc0^O^RS 

[0 0 3 0] 3/ h 3 f3\ 5^ 

Sf^fA 5 0 t, ^^^^ 51t, fl-SBg8KlEJj|5 
2, 5 3i^bft5. *y hy-^^FiE»tff^rA5 

2^/1— ^ 2 ^3*^5 1 b&&MLX^2> a 

&mmm5 3«^y^5 it^fet&mm^x 

[0 0 3 1 ] h !7— ^^AWf^^AS 0 

5Wt^Kr>f^^ K 7 -f x-^^S 
[0 0 3 2] IH3(C N H!7-^^jE« 

M7-^^»#f^7 t ^5 or*, f^sw&aasa^ 

^E^StcEti$tbfc7 p n^7^^^'r5r ^{ci 
y h P T £ © 9 £tf x - ^ iK^XSSrSim- 6 7 s - * iR 

[0 0 3 3] [HI h!7 — *TE#Wr>;*7 L .A5 

5 5tt,'«l^.fi««fif*y M7-^3 0KTeiSSixT 

••TS^-^ttftMWtts 5 2 fcd»fe*i«S*irv^8 0 
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[0 0 3 4] T-9ftims 6f4, KBfl^tLfc:/* h 

mm-r zzticx. *) mm*?- ?dt srffrs-ri 7-9 & 

[0 0 3 5] rof-^M»5 6H:, *S"J-f5<b, PS 

/MOSi:fcMft*$^-/i'5 6 1 ©^5^-^«:R^ 

y ^ LT^<5r y h P T a ©ttiMfcSftfcx-* Sttc© 
*«fclc|f«jBi-S ^ t J: 0 Mr-^ D T Srffcfc-C* 

[00 3 61 81^1-^56 1^ lu-fir*^ 
a-;V6 1 ! , k 1/^^^^1-/1-6 l k , N 
1 N ^bftSHftOKt*^*- 

[0 0 3 7] 11/^^^-/1/6 1! (1, K^i&^n 

-f-f7-f/w#6 i 1A *3j:tfl u>TirW8«*&6 1 1B *s« 
J5££ft5 0 kWt^^6 1 k ^ 
3^7^^ I/*- V 3 y 7 7 ^rtSl^K kl/>f 
t7^y^6l ^ "J: v k W ir»«*» 6 l kB #«/£ 
£ft6„ 1 N te, WtZh^titltc^ 

6 i NA :fcJ;tfNi^ir?l«»8&6 l NB ^«^$ 

l k , 6 1 N i^e>N*-CKS^«S$ix6 a 
[0 0 3 8] WflS5 6 2ll ^ti/^^^e^i-yv 

61 lt 6 l k , 6 1 N \Or51<^X7*~-?Zftf& 

l lf 6 1 k , 6 1 N \Z.&^X : f—9<Dffl&* 

z^z>it#><DT't7'(V i gmnG 2 c k**hmj&ztix 

^So ^LT. SJtJP'i&S&S 6 2lt 1 U-f ir^a- 
^6 1^ k^t^^-^ei^ — , 

[0 0 3 9] x-^»*fSB5 7fi, ^fcgfcW&A/Czfc^ 

fc3y7^u^ 3 y7r>f /^r-JIS £ ttfc 



[0040] ror-^MS5 7(Cfl, r^y^—v 
sr^y^—^a^r^y-fifs 7 o#Ktte>;h,-^ 

5 0 ^rbr, CO7y!)^-v/3y7t7^f5 70 
11. >3 1/774 Mz.m 

m£frx\,^z>ftmzm^x7 ^ w y v^st/sw* 

[0 04 1] Hl4{^ % 3y7^^1/-> 3 V77^W 

#l£^i~o r<oH4ic*5v>r, 3y7^^i/-yay7 

7-f^500^ X-^ff^SUS 6**C>^— ^«P*f«5 

7 fcatf-^-* D to«SSt1-S fc^-SIB*^** 
*f» 5 7 ^#<^StiJ««:«£»tr r. t tf-CS 5 J: 5 fc 

[0 0 4 2] B5fc, #ftS^rARIttS»R (OS 
I ; Open System Interconnection) <D 1 Wi^^r )V<Dty\ 

Sr^i% -oEiic^-rKS^^soott, «pi*a!^ 
Kt80i, £ y u-f ir8 o 2, ^>>hy- 

^Kt8 0 3, h^^zK— FKt8 0 4, ty> 
ay^t805, 7 , ^yr-^3yKt8 0 6 > 

r^y^— > 3 vizirs o 7KBJi{fc£;h/r^5o 

[0 0 4 31 WKt8 0 1lt fcTy hfiaiC^SIft 

®mft&ft^mntt&m>j£ftbtix^z 0 7-^yy 

*LTl>5. ^^7-^Wt803(t 

LT W«S<D -r A eg * (D 
VU^ir8 0 5te, ^T/y^-i/a^Dt^ 

y^t8 o 6 tt, »7/y^yay 
[0 044] hy-**JEM 

«fV^rA5 0WKif^S:H6-B8(CttWr5o B6 
lei, ^^/A5 OCDgj^^m^-r^fc^^^n-f'-Y' 
— h^r^-fo HI 7, 8tc. ^iy^x^l-J:or^S^ti, 

[0 0 4 5] ^ rT\ flHBff^y hy-^3^)=i^y^ 
^5 l±$r-o<^g^5lf^ftv^Ly ? -^^JI^'f-6 
aft©7-^^y h> #J;ttfiI{fx-*9 0 a, 90 
b, 9 0 c, 9 0 dtmtlX^Z>k~tZ>o 
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[0 0 4 6] ^tl^^jlMx-^ 9 0a, 90b, 90 
c, 9 0 dH «X«H7|C^1-J:5^S«jfeID9 1 
a, 91b, 91c, 91dt, iiff tc I D 9 2 a , 9 
2b, 92c, 92d£, Ng# 93a, 93b, 93 
c, 93d^ f-^94a, 94b, 94c, 94d 

[0 0 4 7] Z<D=*^r^/<X 5 l±<7)e^$tL^)3iftx 

"b, AH if* fl am a cracker. J b^OT~?V tr~i/B 

(S) 2 1) , Tl amj £^$7*— ^ 94bt, r a 
cj ^^7-^9 4(1^ Trac J t^ s 0 9 4 

a£, Tker.J ^57*—* 94c <h iC^i £ tlfc^- 
^^o *Lt\ Sb^aiMbS^r (s.22) , ^ 

yyittttiZSMST—fi 9 0 a, 90b, 90c, 90 
die £ ft. mbliU 5 (C^-f ^^^8 0 OlcJ; 

Y7-?3±x*<DT-~?&m*. mmf-? 9 0 a, 9 

Ob, 9 0c/ 90dtW 6 :or-^fiT, SSff 

[0 0 4 8] H6iC^1-J;5^ ^^h!7-^ra?tff 

aitf (S 1 1) o rttlcj;*?, 7*— *fft*»5 6<D1 u 
yf^^ri?^— ;U6 1^1 W-V7>f/^ 6 1 1A &I>*1 

i~firWMB»6 1 1B , k u^rir*^»-^6 i k 
ok u^fir^yw 6 i kA &T/k W^S«&«6 

1rb» N Wf^t^-^e 1 N ON Wt7^/W 

a 5 7 dg-rr - t^yj/isfv^ yjkimmm-^ 

[0 0 4 9) NWfitt, ID 5 iC^i-BJift*^ 

/U8 0 0<D¥Op%MiZX<D'r— ft \*XWfc9ktZ>MZ 
±9*36Stt5 Q **«MrCtt, N= 7 £: tt77*y 

U N=7(Cffibft1\ 0};iiiN=3£LT*5> h!7- 

* Jfi? y ^ a >- £ -efflMfrT 5 J: 5 t 1 5* 
v^^o»-S"bf f -^«Wffc45'K4*S'^3 Steins 

[0 0 5 0] ftlc, x-?ifcglS&5 5(1 -r-^iR^J 

T^*/^? FPTOl/^y K (#J;iti:ii<ix~* 9 
0 a) (S 1 2) , h^=>Vtf 

w^Kffl^ftaf^iK^iyriciitr-stts (s i 
3), rfttcj:«9, ^of^«^yric:3tr-snfc i'< 

^6 1 : tt^m 3^7^^gy77# 



^^^-^^-/HC^i- (S 1 4) 0 ^<D1 Wf ^*v^ 
-^6 1 x Til **rv Y<T>^y?%<D^%g^tiy 4 

[0 0 5 1 ]^ 

[0 0 5 2] k Wf^v^ — A-6 l k cDmjGO^-v^ — 

So 

[0053] c^-e, &u<<(<>r*:i?=L— jve i x , 

61 k , 6 1 N Xt±m&<D$Q!&&Mft£tlZ><DX, 

-watkKn^/^ i k \z^xum\cm 

[0 0 5 4] k l^f 6 l k n =f#>WLty& 

r% ^o/^^^-^oR^jcaor^asr^i-s (s 

1 5) o 

[0 0 5 5] #Jx.H 3y7^^>ay77^/W 

tf I- <fc o y - * d«K 3£ * ft r v > 5 1 r 
kWn^;V6 1 k m lio^n 

IkA^ilil^^r/cO^ (S 1 5*1 ; YES) , ^©t» 
^«rW«j6-rS»&*-W: (S 1 5 2 ; YES) , /^y7 
7&ttfflLT»iiL (SI 5 3) , 77 P yi"V'3y 

(S 1 5 4 ; NO) , k Wt*^a^6 l k ^rfift 
5 0 ^LT, y^n^y Y*nWht* (S 1 2) 0 

[0 0 5 6 ] Sfc, /^77Srttffltt»«»L (SI 
5 3) , nmmt^TLtcm^ (S l 5 4 ; YES) 
ttk W*W«*ffl6 l kB ^777l:r-^^SiT 

^ (S 1 5 2 ; NO) ICH Hfil^ bfcr^^ ^rx^^ 
*p*r^5 7tc»1-^-r ^-f ^Jc^ofcirtlc (s 1 5 
5; YES), k WirWW8»6 lKB^y^rJcS 

^rv^fcx-^^x-^^as 7 tcfrr (s 1 5 
6) . x-^«w«5 7tcats*v^-r*^^(c 

4of:t:5-e (S 1 5 5 ; NO) , c*ti 0±ffii|OS 
O -^^ — /Hc-r— ^ $rS1"o 

[0 0 5 7] ■ z.fn\z£9* kW+*ya-^6 1 k ± 
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-txvtimmzfrx (S23) , mimxtzT-tt 

LT Trac J ^1/^7-^9 4 a^x-^#r£fl5 7 IC 

[0 0 5 8] £JL±^S^1^^ hS(^t9 5I1-^<!: 
M£9 (S 1 3~S 1 6) , *v h7-?±X'<D7-? 

(S2 3). ri amj k^0"f— 2 9 4 b r a cj 

Tker.J *9 4 c k^m^fltzf-^ 

tftS. £^1^ Wfl*S£*bT (S24) , ri am a c 
racker. J ^V^pT^/y^ — a V U-f 'YX<Dyt t <Dy f — 
^ 9 5iC£ftSo 

[0 0 5 9] T&^^U^^^ev^oL— ^5±|2COcfc 9 

[0 0 6 0] NWf ir7>f/i'* 6 1 N T*ii, _bMi£Plfil 

-^DTi:li:f^»W5 (S 1 6) 0 

[0 0 6 1 1 :07P-ft-hMtHll 

[0 0 6 2] x-*ft?WSB5 7TU T^y-Jr— >3> 
T^X'f If 5 7 0d^fc^&A/^fc^fc=i 1/7 4 JfU 

LTV^p :07^y^a VT^-flf 5 7 0Of}J 

5*HE 9 0 0 £ u^^ii^o 

[0 0 6 3] ::-e, r;/y ^—>3 ^r-j-x^ifs 7 

Of*, ^jEjKWMSSr&OV^-ftt^—^fcS^tt^S: 
[0 0 6 4] (i) ttBLT^S:/* h^K'^ip 

¥HSS:T>^y 4r— s/a vr^7-fif 5 7 oi^)^y7>f 

:/W-^3V7xWVM£l5&LT:fc§, j»|ff7-^DT 

[0 0 6 5] (ii) i?*^y^£m&t-£/c#lcj$cfi 
*T—\ is a "yT-Tyjf 5 7 Offico^ ^ i/i/— >a V 

[0 0 6 6] ±^L^>y H7-^^iE«*r^7 1 ^5 



[0 0 6 7] (1) TCP7 p nF3/KDi/^y^#f 

[0 0 6 8] (2) SMTP^pF^^DEBUG^ 

[0 0 6 9] (3) MIME^oT^XhOt^r 
^yf>ffl77^i^ *»**hfc/<;*!7— 
KM LXv?4>'X%Z>&i\Z.'tZ>Zk 0 
[0 0 7 0] (4) m^~>^~^* 

[0 0 7 1 ] (5) telnet:/ n Fn/l/^ root, guest^ 

[0 0 7 2] (6) TFTPyn M/l^/fl^T, a**»7 — 

to 

[0 0 7 3] a±OJ:5^«dcSHfc*jaS«ttO*y 
[00 7 4] (1) T^y ^r— 5/3^Ji*-C<0-fes/i/3 

>Jr— *>3 V^^T^-t ^->3 VOl?t^£fToT^50 

5 r t K <fc 0 »*ofiv^iE*Wr«f o r t s c 
[0 0 7 5] (2) ««o*^4 i e^a— /i>fl:l!:j:9, 

si>8 OOOJ: ptc^ex/HbT*^ *3llS»lio*y M7 
— ^lE#?#r>;*xi»5 oit^vy-r ^U'— i/g ^:?x 

7^^i/->a v^x^^X^-^^SPS 6<DSrfc 

[0 0 7 6] (3) x-^^f^T^^FIE^Wl^ ^7 
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oyy hV*T&ft&&-%-fZ>z.hft<ikm-rz>zt& 
[0 0 7 7] (4)«(ff*yH7^3i©a**b 
if, L AN 1 O^f - V a y^S^y M7-^ 7 iSfi 

[0 0 7 8] (5) WMHf*y 3 4LT** h 

[0 0 7 9] 4*5, 

JSO-^iJ-eHfc 5 tf 5 r. ftfclR£ £ ft 6 1> <D-CH:ft < #31 
fllitf. Hi 0lc^i-j:5lc, *-3>M7-**jE 

y h 7 7 4 ©IB©»«tti&-f * y h ^jEAWt 

[0 0 8 0] Sfc, HI HC^i-J; 5 [-> *y b!7-^ 

— K/«y^s*4 i5JcU"Ct>aw\ fr*5. But 

J:5«^^Kftlfl5 5 5 S:aiJffli-r-6CfcdS-e#So Lfc 

[0 0 8 1] * blC, H 1 2 IC^T* 1 x-^mS 
«5 64\ B«fiOKt7>f;^6 1 1AI 6 

MM^)KtSf^6 1 1B( 6 1^, 

y^*aa»5 8\z&^xy*(/i'*y>ytm$:i' 

ft, *y hy-^XAW^rAS 0 <7)ttf^(Dfl55g^ 



[0 0 8 2] ±y&\,1t&mffiMmx\**y M7- 

D-ROM^nyt-f^X^^nyfa-^i^ 

St 9 prtB*Eft«c#Srfeffl uraffi y tr^ - * tin 

[0 0 8 3] CZX*<Dyv?yAn^ Mcftma^ ffif« 

Bffi Zff 5 J: 5 £ttl« £ ft fc* y h 7 - * ±-C£i£ S ft 
X\i*Z'<*y h&&5iMfx-*te&XS£l^1~3T 
-^JRft^Wt. MPJBftSttfc^n ha/HcjSDfcM 

7 4 ?u—i/B >yT^^xmj££titcffimz&^^x 

^ -/v-e 7 4W)v9 l"C/^ y h S ft tzrf 

^lE^m^Lx^^^nm^^-^M^Ji^Mni- 
h<oxhz> 0 

[0 0 8 4] iiEUfcHlfi^ffi-Cfi^-^iR*! 
St^-^^XSt^-^/SWXS^SrSiffl^^^ 
—PlcmffttX^ZtK ^ftl-fiPI^ftT-ft^^X 

pgfcftT-ftfe^XSSr^^^lelKlcllfTS^^J; 
5l-LTtfii/\ v^-fft^S^t^ r-^{^xmtc*3 

;i/"C7^;v^ y y^U/^y ho^ft^ftfcy 5 -^ 

z><dx. 7*-?m$ti:mxi*f-* t vxn%i<Dhz>¥} 

[0 0 8 5] 

-^^XS^fc^r^-^iRftXS^fc^^ry 

4rmm#>*v=>.-frX7 4 w y y^it^y hoifl 
^bSftfc^-^t^iji^sw^rSw^scj:!?* 
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[0 0 8 6] vv—^K^^m^-^u 

T*feS 0 *»Wl?ttlf«»ao«ftC!>fc5 
[0 0 8 7] £f c> 8*52E«0*«©*yM;^ 

[0 0 8 81 Sfefc, n*«3E*0XH0Efi»ftK: 

ftm^mtt:***?'*.—? izmnzitz fenny * ? 

'<>ry b (DmftitZ titer- ?Z5c(D^mz¥iffimtZ 
[0 0 8 9] Lfc#oT, W*«l^e>3<0V^ixMC 

So 

[0090] (i) rr/y*— >a yjg^^flEfi^Ji* 
x - * fc*«Mt § fix v > « * 1? 5 ^ t ds H JB-e 

< &7 : -*nft\z&4i1rZ<DX\ ro^-^gfcfr^jE 
[0 0 9 1] (2) JB*©^4*i?3.-/uftfcJ:9, 
/WD p lc*?VWfre#. il^- 



grfcftT'n b^sis&ffim&ivxh, a^^^u-^g 
£5, ZCDtcft, ?-?ft&xmm I, 

[0 0 9 2] (3) x - * L < llx- * ft?#r 

E ^3y7^i/-V3y7r^f / ^E5* 

So 

[0 0 9 3] (4) *g®ffir*y H7-^iO|l*«frb* 

[0 0 9 4] (5) g»S^3/ h7-*£LT** M> 

[ill] *J8WO*y M7-^^FiE««f*ffi35SBffl$tL 

[12] H7-^^jE#«ff^"rAt*5/ h?-* 
[03] #y hV-f^JEmftis^^nMMmmn 

[04] mmM<ommxmm-r^^>y^^u—>B> 

[0 5] H3Hlfe©7gffitc;/n h=/KOBS{t:(D«SrRM 
i"Sfc^<O0T*feSo 
[0 6] HSIlt^liOttffSrRWI-SfcftO^o-^ 

[0 7] l^iaS<DJ|?fi(Oft^SrRWi-5fc«)<OH-efc 

[0 8] I^lllfi^«(Z>«ffS:RW-r5fc«)WiaT-fc 

So 

[0 9] HSI!S0^1i-C«fSbyt»*«:^i-H-C*)5. 
[HI 0J *y H7-^^A?W^xA60ftfeoH^ 

[012] hy-^^jE^w^x^co$e>fc^ 
%mm&7&r-7 o 3/ ^ 0-c*>So 
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1 LAN 

3 a«ff*yhy-^ 
7 



5 o h9-^:m»#r>*xA 

5 5 ^-^iRftaj 

5 6 -r-^ffr&a 

5 7 r-^ftWSB 

[mi] 




62a 62b 62c 



562 
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IM2] 



[03] 




,51 
'PT 



| 'g* 



+ 



]4] 



^ 500 


* 




# Filter for login Analyzer f 


filterset t 

physical - 
network 
transport - 
analyzer = 

J 


ether: * <-> aa:bh:cc:xx:yy:zz | 
ip: • <-> 202.26.95.68 } 
I tcp: * <-> 23 I 

login-A login. conf -log login. log -dump login. dump) 



[05] 



800 



-807 
-806 
^805 

,804 
-803 

.802 

/801 
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[He] 



( start) 

1 =1 yis-i/x>7T^^<Dffi*12&} ' — SI 1 



_ I 



« 
1 






—S14 




1 








-S15 



- l 
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[H7] 



-jzf) s f'—$ \-—\ I am a c racker. I 



S22~ 



I am 



94d 



94a 



94c 
ker. | 



✓91 



91b 



92b 



4 



92a 



93b 



91d J 
91c 



92d J 



t*L 

BHWHrac J~94a , 



0*1 I am J^94b 



JE#4 



-90a 

90b 
90c 

90d 



92c 



93d J 
93c 



[B8] 



S23— 




S24— 



Q"3 I a c 1 1 */ c 1 1 K er - I 



94b 



94d 



94a 



I am a cracker. 



94c 



□ 



[010] 
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4 



[H9] 



900 



Cracking Data contents 

Date : Dec 26 13:28:00 1996 

Server Address : 202.26.95.68:23 

Client Address : 202.26.95.69:1024 

Defhost Name : hostl 

Login Times : Threshold User = 0 Threshold System 

Easy Password Used : NO 

Command Details 

S 

Welcome to mail.nal.go.jp <ttyp4) 



login: 
root 

Password: 
roots 

Login incorrect 

login: 

root 

Password: 
root 



[Ull] 



r-2 
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[012] 



CI 




7 




Y 




iilEBBBm^liili 



-61kB 



•61NB 




56 



Y 



57 



62a 62b 62c 

> 



t 



562 
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